{"id":"CVE-2026-72434","title":"netfilter: ipset: make sure gc is properly stopped","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: make sure gc is properly stopped\n\nSashiko noticed that when destroying a set,\ncancel_delayed_work_sync() was called while gc\ncalls queue_delayed_work(…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < c940d1b96248c3081b664ede5418078bdc7c8c07","Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 12088da6add5b003657c8506c5b0fcef835083b8","Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < c78bd5195a5998094a5866df702fbeafda60dafb","Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 4a597a87e2e2f608edb6be2c510dc826b4fdfb53","Linux 5dd9488ae41070b69d2f4acb580f77db5705f9ca","Linux a469bab3386aebff33c59506f3a95e35b91118fd","Linux >= 5.4.24 < 5.5","Linux >= 5.5.8 < 5.6","Linux 5.6"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-16T18:49:50.650584Z"},"published":"2026-08-15","updated":"2026-10-16","sourceUpdated":"2026-10-16T18:55:23.726Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-72434","references":[{"url":"https://git.kernel.org/stable/c/c940d1b96248c3081b664ede5418078bdc7c8c07"},{"url":"https://git.kernel.org/stable/c/12088da6add5b003657c8506c5b0fcef835083b8"},{"url":"https://git.kernel.org/stable/c/c78bd5195a5998094a5866df702fbeafda60dafb"},{"url":"https://git.kernel.org/stable/c/4a597a87e2e2f608edb6be2c510dc826b4fdfb53"}],"tags":["cve.org"],"epss":0.00168,"epssPercentile":0.0569,"ingestedAt":"2026-10-16T19:46:24.396Z","slug":"CVE-2026-72434","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: make sure gc is properly stopped\n\nSashiko noticed that when destroying a set,\ncancel_delayed_work_sync() was called while gc\ncalls queue_delayed_work() unconditionally which\ncan lead not to properly shutting down the gc.\n\n## Affected\n\n- `Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < c940d1b96248c3081b664ede5418078bdc7c8c07`\n- `Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 12088da6add5b003657c8506c5b0fcef835083b8`\n- `Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < c78bd5195a5998094a5866df702fbeafda60dafb`\n- `Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 4a597a87e2e2f608edb6be2c510dc826b4fdfb53`\n- `Linux 5dd9488ae41070b69d2f4acb580f77db5705f9ca`\n- `Linux a469bab3386aebff33c59506f3a95e35b91118fd`\n- `Linux >= 5.4.24 < 5.5`\n- `Linux >= 5.5.8 < 5.6`\n- `Linux 5.6`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}